Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.mft (raw, json)
Hash identifier: Zal/kgj0RnMproHDjMmdnD8Qi+8jHxVPiyQ8AEJGz/Y=
Subject key identifier: 37:5A:5E:5F:23:94:C0:7B:78:B9:DD:96:FB:E0:55:69:7F:80:73:E4
Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
Certificate issuer: /CN=f521e174f84f7165961d41b68ea7262e28337d69
Certificate serial: 0199C41FF078719A1C2D8ED30383645EACED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
Manifest number: 46
Signing time: Wed 08 Oct 2025 14:00:51 +0000
Manifest this update: Wed 08 Oct 2025 14:00:51 +0000
Manifest next update: Thu 09 Oct 2025 14:00:51 +0000
Files and hashes: 1: 9SHhdPhPcWWWHUG2jqcmLigzfWk.crl (hash: FLvgbH//V0d9cQGuPHEfePDZMnodFpMWyOmEWZSnh70=)
2: lREmYeBzk04tbp8GeH-LaDXphtg.roa (hash: zft8RW61aCX4pWyWaUhcgfulMxE/7ocT5F98zoTjm/E=)
3: yTtKVX1UAMcHekyo2zXGvrkQM1I.roa (hash: mdzZIhlGgkU8tIHOKHpSUYEIhlckxiDvx7lT5oQ6M5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:1f:f0:78:71:9a:1c:2d:8e:d3:03:83:64:5e:ac:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69
Validity
Not Before: Oct 8 14:00:51 2025 GMT
Not After : Oct 9 14:00:51 2025 GMT
Subject: CN=375a5e5f2394c07b78b9dd96fbe055697f8073e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:15:9b:dc:d7:c3:5a:17:bc:77:89:0b:57:
24:82:09:95:96:b2:4a:31:68:98:01:fb:33:26:bc:
3b:84:73:2f:fe:ae:f4:ae:bf:d3:a9:7a:94:9a:a5:
91:4b:68:ac:dc:b6:7f:91:c7:ec:c9:94:59:98:dc:
9d:8e:52:38:e2:d8:08:3e:b9:f1:af:cc:21:42:3e:
89:b5:fd:34:07:f6:4d:00:a1:b9:d8:dd:8c:1e:44:
69:46:b9:52:c2:6b:0a:fa:28:99:83:11:bb:6f:54:
ac:0f:36:75:ba:f3:65:c8:cb:30:bb:05:00:7c:d7:
18:a8:c4:f4:8f:d6:00:11:d1:5d:35:fb:9e:61:83:
6b:c1:24:4f:7f:95:bc:61:98:34:ca:bb:fa:24:a2:
09:0f:ee:e9:bc:08:a5:5a:e0:5a:8f:e8:3a:88:25:
f3:04:43:c7:4f:13:26:04:5e:b8:94:7d:c7:ac:15:
f4:87:6f:87:fe:3a:8c:eb:bb:78:ca:0a:05:a6:24:
ad:90:be:6a:2a:bf:49:02:da:13:57:58:31:0c:e8:
3d:67:f4:0f:04:14:d2:7f:85:78:ce:d4:79:f1:22:
9a:4f:5c:d4:aa:1e:9f:8d:51:47:d8:b2:82:4d:e5:
df:0c:f5:e9:ab:b3:62:35:3e:aa:e0:e6:50:4e:43:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5A:5E:5F:23:94:C0:7B:78:B9:DD:96:FB:E0:55:69:7F:80:73:E4
X509v3 Authority Key Identifier:
keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ea:33:27:79:63:1f:4e:c6:14:5b:78:36:2c:69:00:19:f6:
6a:63:43:6e:69:d9:9e:a2:89:27:32:3f:48:1c:0b:a8:c2:db:
9d:ce:20:f8:14:4b:33:4d:80:fc:8b:f9:5c:d5:88:be:06:f9:
78:55:40:23:7c:57:3e:79:ab:30:67:31:ea:3e:fa:36:19:16:
a7:0a:0e:a9:0c:b1:07:cf:f3:fa:33:e0:b2:9d:2c:17:58:2a:
76:1b:70:a0:fe:95:1c:6b:e2:91:6f:b1:02:f9:3f:da:f4:35:
be:85:93:5b:cb:e5:85:40:05:42:37:76:01:da:be:11:58:c4:
77:83:f1:bf:21:21:59:64:d0:78:8c:7d:b4:3d:5d:a1:1b:77:
63:a7:ad:b0:da:e9:23:4c:c4:3c:71:ea:06:5a:41:31:0f:bc:
18:ca:84:97:ed:d0:50:79:9a:cb:bc:f8:ce:7f:46:9d:e9:47:
9c:50:78:76:62:e4:83:3a:ed:47:b6:da:f9:43:b5:15:2b:f5:
54:83:8b:7f:ed:fd:03:49:c0:c8:a6:62:a9:da:cd:8e:ce:2c:
eb:4c:f2:c6:e4:d6:37:b6:9c:c4:ff:04:70:41:41:e1:3d:ac:
63:99:00:ab:3b:51:8d:de:15:75:f4:18:6c:19:ef:6f:a9:c1:
8a:47:9f:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEH/B4cZocLY7TA4NkXqztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MjFlMTc0Zjg0ZjcxNjU5NjFkNDFiNjhlYTcyNjJlMjgz
MzdkNjkwHhcNMjUxMDA4MTQwMDUxWhcNMjUxMDA5MTQwMDUxWjAzMTEwLwYDVQQD
EygzNzVhNWU1ZjIzOTRjMDdiNzhiOWRkOTZmYmUwNTU2OTdmODA3M2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWIVm9zXw1oXvHeJC1ckggmVlrJK
MWiYAfszJrw7hHMv/q70rr/TqXqUmqWRS2is3LZ/kcfsyZRZmNydjlI44tgIPrnx
r8whQj6Jtf00B/ZNAKG52N2MHkRpRrlSwmsK+iiZgxG7b1SsDzZ1uvNlyMswuwUA
fNcYqMT0j9YAEdFdNfueYYNrwSRPf5W8YZg0yrv6JKIJD+7pvAilWuBaj+g6iCXz
BEPHTxMmBF64lH3HrBX0h2+H/jqM67t4ygoFpiStkL5qKr9JAtoTV1gxDOg9Z/QP
BBTSf4V4ztR58SKaT1zUqh6fjVFH2LKCTeXfDPXpq7NiNT6q4OZQTkOyFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdaXl8jlMB7eLndlvvgVWl/gHPkMB8GA1UdIwQY
MBaAFPUh4XT4T3Fllh1Bto6nJi4oM31pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVNIaGRQaFBjV1dXSFVHMmpxY21MaWd6ZldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kOWEwMTAtZDVmNy00NjYxLThkMzIt
ZGQwNjExMWYzZjk2LzEvOVNIaGRQaFBjV1dXSFVHMmpxY21MaWd6ZldrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kOWEwMTAtZDVmNy00NjYxLThkMzItZGQwNjExMWYzZjk2
LzEvOVNIaGRQaFBjV1dXSFVHMmpxY21MaWd6ZldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz+ozJ3lj
H07GFFt4NixpABn2amNDbmnZnqKJJzI/SBwLqMLbnc4g+BRLM02A/Iv5XNWIvgb5
eFVAI3xXPnmrMGcx6j76NhkWpwoOqQyxB8/z+jPgsp0sF1gqdhtwoP6VHGvikW+x
Avk/2vQ1voWTW8vlhUAFQjd2Adq+EVjEd4PxvyEhWWTQeIx9tD1doRt3Y6etsNrp
I0zEPHHqBlpBMQ+8GMqEl+3QUHmay7z4zn9GnelHnFB4dmLkgzrtR7ba+UO1FSv1
VIOLf+39A0nAyKZiqdrNjs4s60zyxuTWN7acxP8EcEFB4T2sY5kAqztRjd4VdfQY
bBnvb6nBikefHQ==
-----END CERTIFICATE-----
Generated at Wed Oct 8 22:54:09 2025 by rpki-client